On which interface should i open ports?

[Lajja1234]

Hi!

Got a case from a customer. They want me to open some ports so that one client can use some applications.

The problem is, I am not sure on which interface i should open the ports. The customer have about 10 interfaces on the ASA. It's a client on the inside network and it should be able to talk to internet through the ports, and anyone on the internet should be able to reach the client on the same ports.

The client uses a static IP.

Sent from Cisco Technical Support iPad App

[stubinski]

Hi,

You need to map the flow of traffic for your customer.  That way you can plan the changes without breaking anything.

It could be as simple as creating ACL's for the inside and outside interfaces + nat or something more complex.